Solved

DNS error 32 attempting to load zone

Posted on 2011-02-15
3
2,023 Views
Last Modified: 2012-05-11
Event Type:      Warning
Event Source:      DNS
Event Category:      None
Event ID:      4521
Date:            2/15/2011
Time:            2:35:22 PM
User:            N/A
Computer:      MARS
Description:
The DNS server encountered error 32 attempting to load zone . from Active Directory. The DNS server will attempt to load this zone again on the next timeout cycle. This can be caused by high Active Directory load and may be a transient condition.


The thing that looks strange to me, the _msdcs under domainname.local is grayed out. I have been through SEVERAL posts and forums trying to find a solution to this problem and no luck.
0
Comment
Question by:gwermter
  • 2
3 Comments
 
LVL 7

Accepted Solution

by:
BobintheNoc earned 500 total points
Comment Utility
If there is corruption within DNS portion of AD, probably the simplest thing to do is to delete the zone and allow the DC to recreate it.  The re-creation will be automatic, as soon as a DC attempts to register it's SRV records.  Once the zone has been recreated, it'd be good to restart NETLOGON on all other DCs and Member servers so that they reregister their appropriate records.

Otherwise, you might be looking at having to do an Authoritative Restore after restoring the system state of one of your DCs from a backup prior to the failures.
0
 

Author Comment

by:gwermter
Comment Utility
It would be considered ok to delete the primary zone in DNS?
0
 
LVL 7

Expert Comment

by:BobintheNoc
Comment Utility
Safe is a relative word.  There will be a timeframe while the zone is being recreated and it will take a bit of time for each client to reregister.  During this time, DNS queries may not return results.  

How many DCs do you have and how large is your environment?  If you're an enterprise, this could be bad to do during production time.   If you're a small environment, you can be recovered within 10 minutes or so--especially if you stage your member machines to reregister right after the zone is recreated when you have a DC reregister itself.  If you've got multiple sites, replication links may fail.

In a flat, non-segmented/non-vlan'ed network, Windows is amazingly resilient when DNS doesn't function fully.  NETBIOS/Mailslots announcements are generally limited to the local subnets only.
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
Learn about cloud computing and its benefits for small business owners.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

7 Experts available now in Live!

Get 1:1 Help Now